Re: Unwanted share access despite security settings
From: Mark-Allen (mark-allen_at_mvps_dot_org)
Date: 07/29/04
- Next message: Don Holmes: "Windows Update - "You must be an Administrator..." Error"
- Previous message: Lanwench [MVP - Exchange]: "Re: Heddin shares restrections"
- In reply to: Titus van Houwelingen: "Unwanted share access despite security settings"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 Jul 2004 00:49:59 +0200
>> Permissions on the share are for a group ABC (defined in Active Directory).
What permissions?
>> NTFS security is full acces for 'everyone'.
I believe that if you have given the "Everyone" group full access, it means no user needs to have any connection what-so-ever with the domain or users or what ever. It allows everyone in the entire world to connect to this share and have full access. I also believe this allow 'anonymous' connections, too.
I have always deleted Everyone from almost every share or permissions because of this. Even Authorized Users is not good in some instances.
For shares try this:
Local Admins (which includes Domain Admins) Full
Domain groups - whatever they need
Does this help?
-- Mark-Allen Perry ALPHA Systems, Switzerland mark-allen AT mvps DOT org "Titus van Houwelingen" <titusnntp@hotmail.com> wrote in message news:410800af$0$62379$5fc3050@dreader2.news.tiscali.nl... Hello, I have a share on a W2K Advanced server with active directory. Permissions on the share are for a group ABC (defined in Active Directory). NTFS security is full acces for 'everyone'. A user MrX belongs to group ABC. Whe MrX log on LOCALLY on a NT4 machine and this local account has the same username/password he can access the share. I think this shouldn't be possibble because the group is a domain group. And no explicit access for MrX has been defined on the share, only the ABC group. Nothing else. It gets worse: when he uses WinXP professional, and he has a LOCAL account with the same name but with an EMPTY password, he gets access to the share when he logs on LOCALLY! The guest account is disabled. I must be doing something stupid. Can anyone please tell me what could be the problem? Thanks in advance, Titus
- Next message: Don Holmes: "Windows Update - "You must be an Administrator..." Error"
- Previous message: Lanwench [MVP - Exchange]: "Re: Heddin shares restrections"
- In reply to: Titus van Houwelingen: "Unwanted share access despite security settings"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
